
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json)
Hash identifier: 42fht+VTGSqKREE5ch+ReVGeMD/2hsXuLGPkEpxmN6Q=
Subject key identifier: 1D:F0:C4:40:7A:AD:75:F0:F5:1A:6A:D3:8A:E2:EC:8A:8D:15:2E:89
Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A
Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
Manifest number: 0217
Signing time: Thu 19 Feb 2026 01:39:15 +0000
Manifest this update: Thu 19 Feb 2026 01:39:14 +0000
Manifest next update: Thu 26 Feb 2026 01:39:14 +0000
Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: polmN8/TCjmD5MNPLrTONWGnFu0c9nPjBT7KqbJ4Gvw=)
2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl
rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
Validity
Not Before: Feb 19 01:39:14 2026 GMT
Not After : Feb 26 01:39:14 2026 GMT
Subject: CN=699669c3-214b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:ae:53:68:82:4d:3f:0f:93:cc:43:79:4a:
d9:f4:cc:0a:9c:44:31:3a:1b:49:22:20:20:93:63:
16:62:34:86:74:78:51:5f:ae:6e:8b:5c:ee:d8:a7:
76:75:52:8e:5e:1f:ba:ce:cd:b4:4a:bd:e0:af:92:
7b:c5:88:b6:ae:7b:1e:ce:3d:0f:3c:dd:a8:10:88:
c5:e8:4a:34:75:ba:5b:8a:e2:0c:59:cd:99:6e:bb:
11:63:0e:0d:e2:86:f2:73:37:01:7d:ae:c6:d5:1c:
6b:d3:77:fa:d3:2e:21:7b:c6:d6:0f:68:7a:44:00:
a2:14:64:1a:41:85:a0:21:86:74:d5:ec:7c:ee:6e:
f0:36:76:c1:5f:9b:71:9e:33:1e:dc:eb:b8:21:ac:
f8:05:3c:6f:83:8a:86:b7:b8:d5:6d:fd:22:c5:b8:
3f:4e:d5:90:4f:a9:b7:2f:fa:ab:48:1e:9d:2d:ff:
a5:b4:dd:76:4b:5d:50:b2:a5:ac:ee:30:f8:d0:2c:
de:71:98:07:39:c6:78:46:4f:e4:16:4f:ac:21:24:
64:5c:04:d4:4a:87:a5:65:67:38:f6:97:86:d4:b9:
f2:8d:30:53:f7:99:89:c5:fb:80:75:1b:49:6b:57:
e4:61:45:e1:f8:8d:8c:9e:da:4a:da:aa:7a:ee:ba:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F0:C4:40:7A:AD:75:F0:F5:1A:6A:D3:8A:E2:EC:8A:8D:15:2E:89
X509v3 Authority Key Identifier:
keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8c:b2:35:d4:f9:5c:1b:c4:7a:2b:64:26:a4:05:aa:2a:e3:
32:58:76:93:c6:e7:c5:14:13:73:33:bf:8b:29:ab:5a:56:35:
da:7e:58:2a:02:53:c9:b2:2f:b0:b3:43:bb:e4:5a:54:db:37:
c3:ea:c1:f2:9b:c9:45:9c:02:bd:aa:2c:6b:18:63:f8:f5:95:
c0:26:4e:7c:f6:af:28:4a:f2:50:41:07:ed:9a:93:71:9d:66:
d1:75:fa:92:aa:ab:7e:ed:b7:55:85:a6:ed:76:34:9a:06:b4:
07:0e:d0:93:74:6c:1c:05:37:c6:3f:97:51:10:2c:c2:df:a5:
82:b1:10:aa:d9:19:b9:92:2f:fe:09:bc:52:de:c9:00:be:42:
97:43:46:8a:6c:58:0e:16:3d:3e:6f:f4:74:ed:e2:4b:09:a2:
c8:10:70:04:b8:98:68:13:38:47:18:eb:94:3b:34:c5:e9:48:
a8:19:b9:ae:63:1f:64:ce:35:e9:3b:3b:3c:d8:db:0f:8d:73:
32:a7:68:6b:d8:12:65:7b:e1:7e:53:13:b3:07:86:57:86:92:
1b:e6:1a:e1:0e:3c:12:e4:f9:fd:f6:95:40:16:ad:d7:14:63:
3a:7e:ee:ef:38:ae:94:30:f0:2f:8c:aa:aa:a2:7b:cb:42:1d:
5b:7e:29:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:37 2026 by rpki-client